Incorrect Authorization in Graphics

Incorrect Authorization in Graphics Windows

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call

Memory corruption while handling client exceptions, allowing unauthorized channel access

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously

Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers

Memory corruption during session sign renewal request calls in HLOS

Memory corruption when keymaster operation imports a shared key

Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network

Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon

Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero

Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA

Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Memory corruption while processing IOCTL command to handle buffers associated with a session

Memory corruption while invoking IOCTL map buffer request from userspace

Information disclosure while reading data from an image using specified offset and size parameters

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling…

Buffer Over-read in Video